Try It Yourself - SyntaxStudy Editor

HTML / CSS / JS

const express      = require('express');
const cors         = require('cors');
const rateLimit    = require('express-rate-limit');
const cookieParser = require('cookie-parser');
const path         = require('path');
const app          = express();

// ── CORS ──────────────────────────────────────────────────────
app.use(cors({
    origin: ['https://example.com', 'http://localhost:3000'],
    methods: ['GET','POST','PUT','DELETE'],
    credentials: true,
}));

// ── Static files ──────────────────────────────────────────────
app.use('/static', express.static(path.join(__dirname, 'public'), {
    maxAge: '1d',
    etag:   true,
}));

// ── Body parsers ──────────────────────────────────────────────
app.use(express.json({ limit: '512kb' }));
app.use(express.urlencoded({ extended: true }));
app.use(cookieParser(process.env.COOKIE_SECRET));

// ── Rate limiting (100 req / 15 min per IP) ───────────────────
const limiter = rateLimit({ windowMs: 15 * 60 * 1000, max: 100 });
app.use('/api/', limiter);

app.get('/api/test', (req, res) => {
    res.json({ cookie: req.signedCookies });
});

app.listen(3000);